# Security Release 0.4.9.11
**URL:** https://forum.torproject.org/t/security-release-0-4-9-11/21786
**Category:** Tor Release Announcement
**Tags:** tor
**Created:** [June 26, 2026, 5:16pm UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786 "2026-06-26T17:16:28Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@dgoulet](https://forum.torproject.org/u/dgoulet)
#### Post date: [June 26, 2026, 5:16pm UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786/1 "2026-06-26T17:16:28Z")
# Where to Download
- [Tarballs](https://dist.torproject.org/)
- [Gitlab Repository](https://gitlab.torproject.org/tpo/core/tor)
- [Bug Report](https://gitlab.torproject.org/tpo/core/tor/-/issues/new)
# Changes
Below are the major changes of the released versions and links to more detailed release notes.
## Stable
Today, we released stable version **0.4.9.11** to address a series of recently reported security issues.
As with many other open source projects, we are currently receiving a lot of security reports (some very good and some very _sloppy_ ;), which has led to this rapid succession of releases.
### Note on **0.4.9.10**
We released it last Tuesday, the 23rd, but soon after, we had to quickly plan another release to address specific issues. As a result, it went under the radar without an official announcement.
We strongly recommend everyone to update as soon as possible. The **0.4.9.11** Tor Debian package is now available in our repository:
[https://deb.torproject.org](https://deb.torproject.org).
#### Release Notes
- [0.4.9.x](https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ReleaseNotes)
---
### Author:  [@atari](https://forum.torproject.org/u/atari)
#### Post date: [June 28, 2026, 7:13pm UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786/2 "2026-06-28T19:13:44Z")
also available as trixie backport:
> `/etc/apt/sources.list`
```auto
#### backports
deb http://deb.debian.org/debian trixie-backports main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian trixie-backports main contrib non-free non-free-firmware
```
`apt-get install tor/trixie-backports`
thx @lavamind & @weasel♥
---
### Author:  [@yurikoles](https://forum.torproject.org/u/yurikoles)
#### Post date: [June 29, 2026, 10:57am UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786/3 "2026-06-29T10:57:55Z")
**0.4.9.11** had already landed on `trixie-security` and `bookworm-security`.
> **[\[SECURITY\] \[DSA 6372-1\] tor security update](https://lists.debian.org/debian-security-announce/2026/msg00283.html)**
> **[Information on source package tor](https://security-tracker.debian.org/tracker/source-package/tor)**
---
### Author:  [@jabdoa2](https://forum.torproject.org/u/jabdoa2)
#### Post date: [June 29, 2026, 10:58am UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786/4 "2026-06-29T10:58:02Z")
Again a reminder that docker images still contain old (and apparently dangerous) versions of tor: [thetorproject/webtunnel-bridge - Docker Image](https://hub.docker.com/r/thetorproject/webtunnel-bridge) . Please also update the images.
---
### Author:  [@mittar](https://forum.torproject.org/u/mittar)
#### Post date: [June 30, 2026, 3:38pm UTC](https://forum.torproject.org/t/security-release-0-4-9-11/21786/5 "2026-06-30T15:38:11Z")
I stopped to wait and made own Dockerfile with compiled webtunnel-server from git and tor from deb repository using the old 0.4.9.5 tor/webtunnel-bridge image as starting image, works well without visible issues but new docker image is of course the best option. Reasons why try and go with 0.4.9.11 won.